Overview

overview

10

Static

static

3

JaffaCakes...d8.dll

windows10-2004-x64

10

JaffaCakes...d8.dll

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    JaffaCakes118_3adc41a38c53d9798e9be8d135ba47d8
  • Size 750KB
  • Sample251218-2vhkyagy7c
  • SHA256 cf0c686564c106b2da71b916c7d022e77894c6dd48e5dc8fec000254def55f11
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
qakbotobama1051632821932bankerdefense_evasiondiscoveryexecutionpersistencestealertrojan

Malware Config

Extracted

Family

  • qakbot

Version

  • 402.363

Botnet

  • obama105

Campaign

  • 1632821932

C2

  • 120.151.47.189:443

  • 41.228.22.180:443

  • 39.52.241.3:995

  • 199.27.127.129:443

  • 216.201.162.158:443

  • 136.232.34.70:443

  • 196.217.156.63:995

  • 120.150.218.241:995

  • 95.77.223.148:443

  • 185.250.148.74:443

  • 181.118.183.94:443

  • 105.198.236.99:443

  • 140.82.49.12:443

  • 37.210.152.224:995

  • 89.101.97.139:443

  • 81.241.252.59:2078

  • 27.223.92.142:995

  • 81.250.153.227:2222

  • 73.151.236.31:443

  • 47.22.148.6:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

MITRE ATT&CK Enterprise v16

Tasks